Protect privilege, not just data.
Solo practitioners and firms up to a few dozen people: litigation, real estate, estate planning, family and criminal defense. The most sensitive data a small business can hold, usually with no one in charge of protecting it.
What matters here
- Client confidentiality is an ethics obligation, and a breach during an active matter is a malpractice exposure.
- Phishing targets firms by name during litigation, settlements and closings.
- Document management, e-discovery and litigation holds need storage that is searchable and provable.
- Billing by the minute means downtime has a price on it.
What we set up in the first ninety days
Each item is written in plain words and becomes part of your documentation vault and evidence file.
Confidentiality
- Encryption on every device and the file store
- MFA on email, document management and billing
- Access by matter, with an audit trail
- Same-day offboarding of staff and contractors
Email and documents
- Domain protection and filtering tuned for settlement and wire fraud
- Secure client document exchange and signatures
- Document management with litigation hold support
- Retention schedule that matches the bar rules
Keeping the firm running
- InfraGuard on the server and every workstation
- Backups with offline copies, tested monthly
- Practice management and billing software kept updated
- Phones that route to the right person and record what the bar allows
Proof
- Written security policy for client questionnaires
- Cyber insurance application answers you can back up
- Yearly review with the managing partner
- Incident plan with the bar’s notification steps
Services for this industry, in order
Most start with the first three. The rest come up when the business grows or an audit does.
- CybersecurityEncryption, MFA, email protection, logging.
- Managed ITWorkstations, server, practice software and accounts.
- 24/7 Monitoring & Incident ResponseInfraGuard on firm systems, 24/7.
- Business Continuity & Hurricane ReadinessBackups and recovery, tested.
- Compliance & Cyber Insurance ReadinessClient security questionnaires and cyber insurance answers.
- Phones & CommunicationsPhones and secure messaging.
Where CRM-NG fits
One record per client, vendor and asset.
A CRM-NG Cloud workspace handles the business side: the people, companies, equipment, tickets and documents everyone keeps asking for. We will tell you plainly what should never go in it, and configure it so it cannot by accident.
Questions we get
Do you understand privilege?
We treat every client file as privileged by default: access by matter, logged, and we do not read content to do our job.
Our files are on one server in the back office. Is that bad?
It is normal. We encrypt it, back it up with an offline copy, monitor it and give you a plan for when it fails.
Can you answer client security questionnaires?
Yes. Corporate clients send them more and more. We keep the written answers current and sign off on the technical ones.
First call
Start with a confidentiality review. We look at where client files live, who can reach them and how, and hand you a plan the bar would approve of.